CVE-2017-4997

CRITICAL

9.8

Description

EMC VASA Provider Virtual Appliance versions 8.3.x and prior has an unauthenticated remote code execution vulnerability that could potentially be exploited by malicious users to compromise the affected system.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published6/29/2017

Last Modified4/20/2025

Sourcenvd

Honeypot Sightings0

Affected Products

dell:emc_vasa_provider_virtual_appliance

Weaknesses (CWE)

CWE-20

References

http://www.securityfocus.com/archive/1/540783/30/0/threaded(security_alert@emc.com)

http://www.securityfocus.com/bid/99169(security_alert@emc.com)

http://www.securityfocus.com/archive/1/540783/30/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/99169(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.